[ARVADOS] updated: 898bbe80a2705824d24c1e72ed0dcb644e732f2a

[git at public.curoverse.com]

Summary of changes:
 services/api/app/controllers/arvados/v1/users_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

       via  898bbe80a2705824d24c1e72ed0dcb644e732f2a (commit)
      from  8c7fb5f13cb167740b7b228c7fab40f2980d1978 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 898bbe80a2705824d24c1e72ed0dcb644e732f2a
Author: Brett Smith <brett at curoverse.com>
Date:   Tue Mar 31 11:22:27 2015 -0400

    4253: Even stricter about accepted repository names during setup.

diff --git a/services/api/app/controllers/arvados/v1/users_controller.rb b/services/api/app/controllers/arvados/v1/users_controller.rb
index 345cd46..14d52bd 100644
--- a/services/api/app/controllers/arvados/v1/users_controller.rb
+++ b/services/api/app/controllers/arvados/v1/users_controller.rb
@@ -106,7 +106,7 @@ class Arvados::V1::UsersController < ApplicationController
     elsif @object.username.nil?
       raise ArgumentError.
         new("cannot setup a repository because user has no username")
-    elsif params[:repo_name].include?("/")
+    elsif object_found and params[:repo_name].start_with?(@object.username)
       full_repo_name = params[:repo_name]
     else
       full_repo_name = "#{@object.username}/#{params[:repo_name]}"

-----------------------------------------------------------------------


hooks/post-receive
--